Headscale

Headscale is a self-hosted implementation of the Tailscale control server, enabling users to operate their own private WireGuard-based overlay network without relying on Tailscale's managed infrastructure. It handles key exchange, IP assignment, and NAT traversal coordination for a tailnet, and works with the standard Tailscale clients across Linux, macOS, Windows, iOS, and Android.

Because Headscale runs on your own hardware, all coordination data stays within your environment. Configuration is managed through a simple YAML file, and the project provides official Docker images for straightforward deployment. It is designed to support a single tailnet per instance, making it well-suited to personal labs, homelab setups, and small teams.

Headscale is aimed at self-hosters, hobbyists, and small organisations who want the seamless, zero-config VPN connectivity of Tailscale while maintaining full control over the control plane and keeping all network metadata on their own infrastructure.